Code Execution Vulnerability Found in Libpurple IM Library

A severe vulnerability has been disclosed in libpurple, the library used in the development of a number of popular instant messaging clients, including Adium for the macOS platform. Continue reading Code Execution Vulnerability Found in Libpurple IM Library

Valve Patches Trivial XSS Bug in Steam

A cross-site scripting vulnerability on the Steam gaming platform has been patched. The flaw could be exploited by simply viewing a crafted profile. Continue reading Valve Patches Trivial XSS Bug in Steam

It’s Incredibly Easy to Tamper with Someone’s Flight Plan, Anywhere on the Globe

Hackers can gain access to and manipulate flight information because of aging legacy systems. Continue reading It’s Incredibly Easy to Tamper with Someone’s Flight Plan, Anywhere on the Globe

DoD Publishes Vulnerability Disclosure Policy

In the wake of the Pentagon and Army bug bounties, the government continues to engage researchers with the publication of the DoD’s vulnerability disclosure program. Continue reading DoD Publishes Vulnerability Disclosure Policy